if(isset($_POST['login'])) {
    $password = $_POST['password'];
    $enc_password = hash('sha512', $password);
    $q = "SELECT id, username, password FROM user WHERE username='{$_POST['username']}' AND password='{$enc_password}'";
...........